Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
File:                     87fd3f04-d60b-368d-b9a6-05d1924127f0.roa (raw, json)
Hash identifier:          7fw3tpTcD0M/a0SXMs4SRiANp6D57BKwtQIMQlhgyYc=
Subject key identifier:   75:80:86:25:CE:C5:E9:55:D2:41:65:08:2A:3C:7E:F2:4B:CC:7C:35
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F43285849CBCF914C08E130325500CB00
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     4809
IP address blocks:        2605:9d80:9000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:91:4c:08:e1:30:32:55:00:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=5ecca8eb-299d-4fd3-ad0d-74a1b12fc4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:c6:b5:ce:39:ab:9b:45:a2:48:5f:b7:3f:
                    c9:fb:0b:fc:44:34:e9:cd:6b:80:98:65:d3:32:27:
                    e2:35:2d:64:92:20:1b:09:73:d2:6f:9f:9a:d1:bc:
                    d8:b5:0c:1f:7e:9d:27:2e:b9:75:58:81:43:7b:a0:
                    f0:01:61:92:9b:47:52:ea:9d:8c:7c:f3:57:42:d1:
                    08:c2:72:63:c7:ec:8e:b6:2e:f9:9a:b7:f9:86:b0:
                    ef:f5:ab:d7:df:b4:32:b7:02:6f:fc:1b:1c:ac:03:
                    60:3b:38:7f:36:ba:5b:f8:fd:ac:e9:b5:a6:fa:09:
                    02:81:a4:76:f3:5c:ea:0f:9a:00:4b:c5:70:55:b2:
                    f2:db:f4:4d:c8:fa:d3:d9:5b:1a:95:36:ac:53:e8:
                    c0:fc:9b:2e:0c:46:cd:c8:6d:bd:43:68:b9:29:a2:
                    62:b0:22:76:1b:ce:b4:4d:10:0b:23:2b:e2:7c:61:
                    07:cc:05:ee:db:0b:9b:d7:69:6a:a3:2c:1d:4c:30:
                    ac:9c:30:61:ff:d0:1e:8c:78:77:90:9e:7b:c2:9a:
                    08:97:44:a7:7b:bc:4b:1e:d7:c2:8d:32:c6:21:5b:
                    88:5e:6b:1e:d5:0e:26:4b:f0:4c:f5:f6:01:af:78:
                    8a:59:14:91:bc:31:f7:89:9c:5b:6b:23:b1:20:1f:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:80:86:25:CE:C5:E9:55:D2:41:65:08:2A:3C:7E:F2:4B:CC:7C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:1f:d9:7d:05:ac:6a:22:e4:3c:cb:9a:cf:b2:f0:59:48:
         2c:da:39:2b:5e:f7:d4:6e:7c:cd:11:cd:d6:11:d9:bd:24:2b:
         d5:97:21:5b:e3:a1:76:49:29:db:1d:b9:49:47:9f:17:aa:81:
         b9:1e:36:46:59:81:67:6e:7b:42:16:81:e3:3f:9d:aa:7e:25:
         89:e7:79:85:1c:70:27:dc:7c:b5:2f:60:6a:4c:e3:a4:74:93:
         29:8d:23:1d:cc:9a:47:21:be:da:97:d1:72:08:de:fc:60:bc:
         7f:f2:c2:3d:dc:14:1d:ba:d2:a6:4c:03:96:16:cf:f0:c4:38:
         50:7e:4f:4a:22:75:a7:04:32:e0:7d:0c:92:38:fe:fd:3c:b5:
         6e:3e:6a:ba:fe:b0:ee:97:7b:ff:66:39:77:1f:78:67:76:17:
         a6:36:a9:1b:5c:eb:6f:4a:4a:ef:d1:de:d7:83:cd:28:46:8f:
         a7:25:ec:3c:e2:67:83:47:6c:3e:5a:7c:3e:4a:1c:ee:ed:33:
         a0:4a:6e:65:7b:26:73:89:d6:e1:6e:59:bd:99:a6:51:70:a7:
         ba:24:08:73:7e:51:10:6e:a8:98:a2:b4:e2:e4:15:81:0f:33:
         0e:00:a9:1a:1f:ec:86:a4:4c:71:b1:2c:05:7c:6b:06:56:a6:
         63:b2:d3:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnLz5FMCOEwMlUAywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
NWVjY2E4ZWItMjk5ZC00ZmQzLWFkMGQtNzRhMWIxMmZjNGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilvGtc45q5tFokhftz/J+wv8RDTpzWuAmGXT
MifiNS1kkiAbCXPSb5+a0bzYtQwffp0nLrl1WIFDe6DwAWGSm0dS6p2MfPNXQtEI
wnJjx+yOti75mrf5hrDv9avX37QytwJv/BscrANgOzh/Nrpb+P2s6bWm+gkCgaR2
81zqD5oAS8VwVbLy2/RNyPrT2VsalTasU+jA/JsuDEbNyG29Q2i5KaJisCJ2G860
TRALIyvifGEHzAXu2wub12lqoywdTDCsnDBh/9AejHh3kJ57wpoIl0Sne7xLHtfC
jTLGIVuIXmse1Q4mS/BM9fYBr3iKWRSRvDH3iZxbayOxIB959wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHWAhiXOxelV0kFlCCo8fvJLzHw1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvODdmZDNmMDQtZDYwYi0z
NjhkLWI5YTYtMDVkMTkyNDEyN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWdgJAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAKsf2X0FrGoi5DzLms+y8FlILNo5K1731G58zRHN1hHZvSQr1Zch
W+Ohdkkp2x25SUefF6qBuR42RlmBZ257QhaB4z+dqn4lied5hRxwJ9x8tS9gakzj
pHSTKY0jHcyaRyG+2pfRcgje/GC8f/LCPdwUHbrSpkwDlhbP8MQ4UH5PSiJ1pwQy
4H0Mkjj+/Ty1bj5quv6w7pd7/2Y5dx94Z3YXpjapG1zrb0pK79He14PNKEaPpyXs
POJng0dsPlp8Pkoc7u0zoEpuZXsmc4nW4W5ZvZmmUXCnuiQIc35REG6omKK04uQV
gQ8zDgCpGh/shqRMcbEsBXxrBlamY7LTWw==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:20 2025 by rpki-client